This guide explains why two-factor authentication (2FA) isn’t compatible with PhantomBuster Phantoms, what happens when it’s enabled, and how to work around it if needed.
Why 2FA isn’t supported in Phantom automations
Phantoms run from the cloud using a copy of your login session called a session cookie.
When 2FA is enabled on your LinkedIn, Facebook, or Instagram account, the platform often asks for a second verification step when it detects a login from a new location, like PhantomBuster’s servers.
Since Phantoms can’t interact with login screens or enter verification codes, they can’t pass this step. That’s why:
- The Phantom is redirected to a login or checkpoint page.
- It fails to access the intended URL or perform the task.
- The launch stops without completing the automation.
What to do if your account uses 2FA
For personal accounts
If you’re comfortable doing so:
- Temporarily disable 2FA while setting up your Phantom.
- Once your session is connected, you may re-enable 2FA, but the Phantom may stop working if your session expires or becomes invalid.
For business accounts or teams
- Check with your IT team or account administrator to see if 2FA can be disabled or bypassed for the account used in automation.
- If that’s not possible, consider using a different account that doesn’t require 2FA (e.g. a team-managed account or personal profile).
2FA and your PhantomBuster account
PhantomBuster does not currently support enabling 2FA for user logins to its own platform. Authentication is handled via email and password.
To keep your PhantomBuster account secure:
- Use a strong, unique password.
- Enable email alerts for suspicious activity (via account settings).
- Avoid reusing credentials across platforms.
Tips to keep your session active and stable
Even without 2FA, sessions can expire or become invalid. Here’s how to keep them running smoothly:
- Use the PhantomBuster browser extension to automatically retrieve and refresh your session.
- Avoid logging out of your platform account, this invalidates your session cookie.
- Start slowly with your automation to avoid suspicious login activity or platform blocks.